reject humanity, become toaster | she/they | experimenting with names
I think SFTP would work plenty. On linux you can use rclone to mount it, and Android has many file managers that support it (personal favorite is Total Commander with the SFTP plugin)
You could also certainly host a full Nextcloud instance, but it might be a bit overkill
You can use a DNS challenge to show you are in control of the domain without having anything exposed to the net. Essentially LE gives you a special value you have to add as a TXT DNS entry. LE will check if this record exists for your domain, and gives you a certificate, no public IP involved. This even allows you to create wildcard certificates.
Input means the packet stops at the router, like when you access its web ui. I don’t think you want to give the internet access to your router settings :)
yes, lan is the Local Area Network, wan is the Wide Area Network. The zone lan refers to the devices on the local side, wan to the great internet.
Disclaimer: I am not a professional network engineer, this is just what i found out after researching some iptables terminology.
the lan => wan is perhaps a bit misleading.
lan is the zone, or which side of the router this firewall rule is in reference to.
wan is another zone, the arrow shows where packets of type Forward are ending up.
When forward on the wan interface is set to reject, it essentially means no device from outside may initiate a connection. However, they may respond to already opened connection.
I don’t yet know what masquerade does.
Did you set the modem to bridge mode/DMZ, or alternatively set it to port forward to the router. The router should then port forward to the server.
Are you sure the IP address in duckdns is correct? Do you have a static or dynamic public IP, and if dynamic, how are you updating it?
from what i remember the name doubles as the hostname. i think you could change it in the lxc options?